Xlight Ftp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:xlightftpd:xlight_ftp_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xlightftpd (34432d93-bf29-520d-b4b9-d7a43385b1d3) |
|---|---|
| Product | Xlight Ftp Server (5c488824-8184-5c05-b152-38335ef02f4d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-46483 |
vulnerable | 2026-06-08 06:48:10.109466 |
Details available
Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content.
Published: 2024-10-22T00:00:00.000Z
Updated: 2024-10-23T18:28:25.050Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0737 |
vulnerable | 2026-06-08 06:22:02.028264 |
Xlightftpd Xlight FTP Server Login denial of service
MEDIUM (5.3)
A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251560.
Published: 2024-01-19T21:31:03.973Z
Updated: 2024-09-12T19:12:34.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53886 |
vulnerable | 2026-06-08 06:19:39.919975 |
Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.
Published: 2025-12-15T20:28:21.800Z
Updated: 2026-05-12T20:46:32.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4795 |
vulnerable | 2026-06-08 04:51:49.852543 |
Details available
Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka password) command.
Published: 2010-04-22T14:00:00.000Z
Updated: 2024-08-07T07:17:25.901Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.